We will be carrying out essential maintenance activity on this website on Tuesday 3rd October between 1000 and 1330 UK time. You might experience some brief interruption or loss of some functionality. We apologise for any inconvenience this may cause.

IST/33/5 - Identity Management and Privacy Technologies

Sector: Governance & Resilience

Categories: | Information technology applications. General | Information technology. | Management. Human resources | IT applications. Other | Certification. Conformity assessment | Information coding. Character sets | | Law. Administration | | Identification cards and related devices | Information technology. General | Telecontrol. Telemetering | Company organization and management. General

Overview: Under the direction of IST/33, is responsible for the UK input to ISO/IEC JTC 1/SC 27/WG 5 and CEN/CLC/JTC 13/WG 5 whose  scope covers the development and maintenance of standards and guidelines addressing security aspects of identity management, biometrics, privacy and the protection of personal data.  The scope also includes the preparation, publication, review and revision of relevant British standards.

Committee standards activity

In Progress (25)
Reference Standards description
Status ?

The standards development process is divided into chronological stages: Proposal; Drafting; Public comment; Comment resolution; Approval; Published standard.
Revision of BS 10012:2017 + A1:2018 – Data Protection – Specification for a Personal Information Management System (PIMS)

Categories: Information management | Standardization. General rules

Proposal begins : 2025-11-16 		Proposal
Revision of BS 10012: Data protection. Specification for a personal information management system

Categories: Information management | Standardization. General rules

Proposal begins : 2026-01-13 		Proposal
PD ISO/IEC/TS 27568 Security and privacy of digital twins

Categories: Unclassified documents

Drafting begins : 2026-11-30 		Drafting
PD IEC/TR 27573 ED1 Information technology - Brain-computer Interfaces - Overview of ethicaland societal concerns

Categories: Unclassified documents

Public comment begins : 		Public comment
New Work Item Proposal - Privacy information management. Code of practice and guidance for the implementation of BS EN ISO/IEC 27701

Categories: Information management | Standardization. General rules

Proposal begins : 2026-03-25 		Proposal
BS ISO/IEC 27566-3 Information security, cybersecurity and privacy protection. Age assurance systems. Part 3: Approaches to analysis or comparison

Categories:

Public comment begins : 2026-09-11 		Public comment
BS ISO/IEC 27091 Cybersecurity and Privacy — Artificial Intelligence — Privacy protection

Categories: | Information technology applications. General

Approval begins : 2027-01-05 		Approval
BS EN ISO/IEC 29115 Information technology — Security techniques — Entity authentication assurance framework

Categories:

Drafting begins : 2026-03-02 		Drafting
BS EN ISO/IEC 27701:2021 Security techniques. Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management. Requirements and guidelines

Categories:

Approval begins : 2021-04-29 		Approval
BS EN ISO/IEC 27574 Information security, cybersecurity and privacy protection. Privacy in brain computer interface (BCI) applications

Categories: Unclassified documents

Drafting begins : 2027-01-29 		Drafting
Published (34)
Reference Standards description
Status ?

The standards development process is divided into chronological stages: Proposal; Drafting; Public comment; Comment resolution; Approval; Published standard.
PD ISO/IEC TS 29003:2018 Information technology. Security techniques. Identity proofing

Categories:

Published standard begins : 2018-04-04 		Published standard
PD ISO/IEC TS 27570:2021 Privacy protection. Privacy guidelines for smart cities

Categories:

Published standard begins : 2021-02-09 		Published standard
PD ISO/IEC TS 27564:2025 Privacy protection. Guidance on the use of models for privacy engineering

Categories:

Published standard begins : 2025-09-25 		Published standard
PD ISO/IEC TS 27560:2023 Privacy technologies. Consent record information structure

Categories:

Published standard begins : 2023-09-06 		Published standard
PD ISO/IEC TR 27563:2023 Security and privacy in artificial intelligence use cases. Best practices

Categories: Information technology. General

Published standard begins : 2023-06-07 		Published standard
PD CEN/CLC/TS 17880:2022 Protection Profile for Smart Meter. Minimum Security requirements

Categories: Telecontrol. Telemetering | | IT applications. Other

Published standard begins : 2023-03-13 		Published standard
PD CEN/CLC/TR 17919:2023 Data protection and privacy by design and by default. Technical Report on applicability to the videosurveillance industry. State of the art

Categories:

Published standard begins : 2023-03-13 		Published standard
BS ISO/IEC 29190:2015 Information technology. Security techniques. Privacy capability assessment model

Categories:

Published standard begins : 2015-08-19 		Published standard
BS ISO/IEC 29115:2013 Information technology. Security techniques. Entity authentication assurance framework

Categories:

Published standard begins : 2013-04-10 		Published standard
BS ISO/IEC 27561:2024 Information security, cybersecurity and privacy protection. Privacy operationalisation model and method for engineering (POMME)

Categories:

Published standard begins : 2024-05-21 		Published standard
Withdrawn (18)
Reference Standards description
Status ?

The standards development process is divided into chronological stages: Proposal; Drafting; Public comment; Comment resolution; Approval; Published standard.
PD CEN/TR 18241:2025 Privacy management in products and services — Biometric access control products and services

Categories:

Withdrawn begins : 2026-02-05 		Withdrawn
BS ISO/IEC 29184:2020 Information technology. Online privacy notices and consent

Categories:

Withdrawn begins : 2023-07-24 		Withdrawn
BS ISO/IEC 29151:2017 Information technology. Security techniques. Code of practice for personally identifiable information protection

Categories:

Withdrawn begins : 2022-09-16 		Withdrawn
BS ISO/IEC 29146:2016 Information technology. Security techniques. A framework for access management

Categories:

Withdrawn begins : 2022-11-02 		Withdrawn
BS ISO/IEC 29134:2017 Information technology. Security techniques. Guidelines for privacy impact assessment

Categories:

Withdrawn begins : 2020-04-09 		Withdrawn
BS ISO/IEC 29101:2013 Information technology. Security techniques. Privacy architecture framework

Categories:

Withdrawn begins : 2018-11-30 		Withdrawn
BS ISO/IEC 29100:2011+A1:2018 Information technology. Security techniques. Privacy framework

Categories:

Withdrawn begins : 2020-07-09 		Withdrawn
BS ISO/IEC 29100:2011 Information technology. Security techniques. Privacy framework

Categories:

Withdrawn begins : 2018-07-31 		Withdrawn
BS ISO/IEC 27701:2019 Security techniques. Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management. Requirements and guidelines

Categories:

Withdrawn begins : 2021-05-05 		Withdrawn
BS ISO/IEC 27555:2021 Information security, cybersecurity and privacy protection. Guidelines on personally identifiable information deletion

Categories:

Withdrawn begins : 2025-04-02 		Withdrawn